policies:-name:ec2-auto-tag-userresource:ec2mode:type:cloudtrailrole:arn:aws:iam::{account_id}:role/custodian-auto-tagger# note {account_id} is optional. If you put that there instead of# your actual account number, when the policy is provisioned it# will automatically inherit the account_id properlyevents:-RunInstancesfilters:-tag:CreatorName:absentactions:-type:auto-tag-usertag:CreatorNameprincipal_id_tag:CreatorId